basicstack/stack.basicstack.de
2
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

apps/stalwart/stalwart-config.yaml aktualisiert

Browse source 
Additional allowed IP settings for the smtp and imap listeners
This commit is contained in:
Andreas.Leinen.imicros 2026-08-01 10:45:38 +00:00
parent 125a2adc0d
commit 1e77e48e94
1 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
apps/stalwart/stalwart-config.yaml
View file

@ -39,17 +39,29 @@ data:
bind = ["0.0.0.0:25"] bind = ["0.0.0.0:25"]
protocol = "smtp" protocol = "smtp"
# Security: Allow internal cluster IPs for Traefik ingress
[server.listener.smtp.security]
allowed-ips = ["10.244.0.0/16", "127.0.0.1/32"]
# Submission Listener (Port 587 with STARTTLS) # Submission Listener (Port 587 with STARTTLS)
[server.listener.submission] [server.listener.submission]
bind = ["0.0.0.0:587"] bind = ["0.0.0.0:587"]
protocol = "smtp" protocol = "smtp"
# Security: Allow internal cluster IPs for Traefik ingress
[server.listener.submission.security]
allowed-ips = ["10.244.0.0/16", "127.0.0.1/32"]
# IMAPS Listener (Port 993 with TLS) # IMAPS Listener (Port 993 with TLS)
[server.listener.imaps] [server.listener.imaps]
bind = ["0.0.0.0:993"] bind = ["0.0.0.0:993"]
protocol = "imap" protocol = "imap"
tls.implicit = true tls.implicit = true
# Security: Allow internal cluster IPs for Traefik ingress
[server.listener.imaps.security]
allowed-ips = ["10.244.0.0/16", "127.0.0.1/32"]
# #
# TLS Configuration # TLS Configuration
# #